Grey Havoc

ACCESS: USAP
Senior Member
Joined
9 October 2009
Messages
19,711
Reaction score
10,144



















 
If the United States wants to protect critical infrastructure from this then install some equipment to prevent this or take them offline and put them on a dedicated, monitored system.
 
Or make an example of any company that approaches cybersecurity as a joke to be relentlessly defunded and laughed off the budget. There is no excuse whatsoever for this shit other than greed and laziness on the part of Colonial Pipeline's management and ownership.

People have gone to prison for life without parole for negligence that caused far less damage than this. It's time we apply this standard to cybersecurity and corporate management in general.
 
Maybe I'll piss off many now, but how would this lockdown be handled if the Keystone XL canceled in January was currently up and running? (Obviously, without a hacker attack even on that pipeline and its plants)
 
Dax is a quiet town of 20 000 souls in south-west France not too far from where I grew up. Recently some criminal arseholes paralyzed its hospital via a cyber attack. It was quite devastating and they are still recovering from it. All the patients digitalized files, the hospital complete network was wiped down for the count.
...
I suggest bringing back middle-ages "burning at the stake" for these hackers. Main problem: rotten shit surrounded by scum doesn't burn very well, plus the smell of it would poison the air and make people vomit for hundred of kilometers.
 
Maybe I'll piss off many now, but how would this lockdown be handled if the Keystone XL canceled in January was currently up and running? (Obviously, without a hacker attack even on that pipeline and its plants)

No impact. Colonial is a product pipeline delivering refined petroleum products to distribution centers. Keystone XL was a crude oil pipeline carrying unrefined petroleum to refineries.
 
I suggest bringing back middle-ages "burning at the stake" for these hackers.
While we can all agree with this, the reality is that the hackers are almost certainly nowhere that the cops could get to them even if the cops know where they are. Hacking is something that can be done on the far side of the planet.

Lets say you find out that the hackers are in, say, Kurdistan. Or Moscow. Or New Delhi. Whatcha gonna do about it?

What *might* eventually happen is that the worldwide internet breaks down into firewalled separate regional nets. Unlikely, apart from certain nations walling themselves off.
 
Maybe I'll piss off many now, but how would this lockdown be handled if the Keystone XL canceled in January was currently up and running? (Obviously, without a hacker attack even on that pipeline and its plants)

No impact. Colonial is a product pipeline delivering refined petroleum products to distribution centers. Keystone XL was a crude oil pipeline carrying unrefined petroleum to refineries.
This is true... but it also shows the *importance* of pipelines. When Colonial went down, the response was to start trucking fuel around. And it has clearly been wholly inadequate, and if it keeps going you'll see spills and crashes and fires. Keystone would have provided equivalent safety and efficiency over existing crude delivery systems.
 
This is a national security issue. I suggest putting all critical infrastructure into a secure system under military supervision.
 
What will it take to call up the federal governement on crass incompetence?
Just imagine what would happen if the Israeli govt was this bad...

Edit: I don't mean Trump or Biden, I mean the whole freaking institution with its zillions of generals
 
So, you know that right now, all the Feds are allowed to do for civilian cyber security is issue recommendations, right? They're actually forbidden from requiring specific cyber security measures from private companies, even in critical infrastructure sectors.
 
 
There are videos floating around of people filling plastic bags with fuel....and at least one photo of a boot full of plastic bags filled with fuel.

The US Consumer Product Safety Commission put out this curt tweet four hours ago 'Do not fill plastic bags with gasoline.'

:rolleyes::rolleyes::rolleyes:
 
Stupid people filling their cars with gasoline fumes *and* liquid gasoline in bags that the gasoline will dissolve would seem to be both a problem *and* a solution all in one.

EWEYz1wWsAA2phX.jpg
 
Why pay a human being anything when remote, computer connected controls can be used? And which can be hacked. Leaving manual controls in working order and sending in a human being to operate the line manually is the quick answer to such problems.
 
There are videos floating around of people filling plastic bags with fuel....and at least one photo of a boot full of plastic bags filled with fuel.

The US Consumer Product Safety Commission put out this curt tweet four hours ago 'Do not fill plastic bags with gasoline.'

:rolleyes::rolleyes::rolleyes:

And that video is at least a year old, unrelated to the current situation.
 






 
I suggest bringing back middle-ages "burning at the stake" for these hackers.
While we can all agree with this, the reality is that the hackers are almost certainly nowhere that the cops could get to them even if the cops know where they are. Hacking is something that can be done on the far side of the planet.

Lets say you find out that the hackers are in, say, Kurdistan. Or Moscow. Or New Delhi. Whatcha gonna do about it?

What *might* eventually happen is that the worldwide internet breaks down into firewalled separate regional nets. Unlikely, apart from certain nations walling themselves off.
The toughest thing is not getting fooled. An attack could appear to come from Russia but actually originate in China. Don't know if it's possible to trace it all the way back to the source with certainty. If it is then tell the country it was launched from that going forward this kind of crap will be considered an attack on our country and respond accordingly. Don't care if some script kiddie flew to China and launched from there. Eventually these "hackers" would be so widely hated they'd probably be executed out of hand.
 
The toughest thing is not getting fooled. An attack could appear to come from Russia but actually originate in China. Don't know if it's possible to trace it all the way back to the source with certainty. If it is then tell the country it was launched from that going forward this kind of crap will be considered an attack on our country and respond accordingly. Don't care if some script kiddie flew to China and launched from there. Eventually these "hackers" would be so widely hated they'd probably be executed out of hand.

Then the thing to do would be for the MSS to hire a Russian hacker to launch a cyberattack on Wall Street from Murmansk. US retaliates against Russia, China sits back and receives praise and adulation from Disney.
 
Ah... yes, of course.

In the alternative, add a function to Homeland Security, like securing critical infrastructure. Meanwhile, I doubt the NSA has this problem, and I suspect that they continue to monitor all electronic communications.
 
If this cyber-ransom was directed at Israeli gov't facilities, the guilty bastards would be quietly warned off and if they persisted would die untraceable deaths. See Nazi war criminals, Munich Olympics terrorists, Dr. Gerald Bull, etc. Mossad would leave zero evidence linking them to the assassinations.
 
The toughest thing is not getting fooled. An attack could appear to come from Russia but actually originate in China. Don't know if it's possible to trace it all the way back to the source with certainty. If it is then tell the country it was launched from that going forward this kind of crap will be considered an attack on our country and respond accordingly. Don't care if some script kiddie flew to China and launched from there. Eventually these "hackers" would be so widely hated they'd probably be executed out of hand.

Then the thing to do would be for the MSS to hire a Russian hacker to launch a cyberattack on Wall Street from Murmansk. US retaliates against Russia, China sits back and receives praise and adulation from Disney.
Yeah. Personally I think they should air-gap anything important from the internet. This would stop all but the most determined adversary. (See Iranian centrifuges.)
 
The lack of imagination I'm seeing from this is staggering. If it's "Oh well, we'll just pay the money. It's still a better deal than keeping everything offline and manual." then they deserve the loss. It's their fault and the so-called hackers.

Meanwhile, the NSA has no idea about what's going on... And that $5 million went to a nonexistent address/location...
 
So, as I'm reading more, it's interesting that what seems to have been hacked is strictly the billing side of their system; there's no indication of a hack against the SCADA or control infrastructure. The pipeline shutdown was strictly precautionary (or because Colonial wasn't sure who and how much to bill for deliveries, if you're more cynical).

Air gapping sounds obvious, but it makes system operations really hard and expensive. The cost of building out and maintaining a dedicated network just to run a set of valves and pumping stations is non-trivial, compared to the cost of plugging those nodes into existing internet services. The more reasonable system would be to tunnel all that through a VPN and actually secure the VPN. Not cheap, but cheaper than a dedicated hardline network for each infrastructure system.
 
Air gapping sounds obvious, but it makes system operations really hard and expensive
Seems like it would have potentially saved Colonial $5M this week alone.., and then we'll add up the economic disruption up and down the east coast. And paying it guarantees we'll be seeing more of this.

Sometimes, the straightest way is through the mud. For critical infrastructure and systems, I cannot see any cost savings being worth the exposure risk.

As an aside, I don't really want to live in a society where I wake up every day and wonder if the power and gas will work tomorrow because the utilities make it clear they would rather pay ransoms than pay for security.
 
If this cyber-ransom was directed at Israeli gov't facilities, the guilty bastards would be quietly warned off and if they persisted would die untraceable deaths. See Nazi war criminals, Munich Olympics terrorists, Dr. Gerald Bull, etc. Mossad would leave zero evidence linking them to the assassinations.

So untraceable Steven Spielberg makes movies about them...

Israel may blow up a hacker's apartment in Gaza or retaliate in kind against Iran but these kinds of tactics have severe weaknesses.
 
Last edited:

Similar threads

Back
Top Bottom